RBL checking
shanna leonard
ssl at AHSC.ARIZONA.EDU
Wed May 5 01:27:53 IST 2004
Ed Kasky wrote:
> At 02:08 PM Tuesday, 5/4/2004, jason wrote -=>
>
>> Just wanted to see what people thought about the various RBL's. Which
>> ones
>> are good, which are bad etc.
>>
>> Also, I'm working on a script of some sort (command even) that will
>> parse
>> my logs and be able to sort out some statistics to see the stats on how
>> many rejections each specific RBL is doing...
>>
>> Be nice to get a print out of some sort to see a nice break down...
>
per advice on this list, I am using sbl-xbl spamhaus list for reject via
sendmail.
(it is apparently more conservative than some)
I am bouncing about 3.5k messages a day thru rbl rejects using xbl+sbl
and dul.dnsbl.sorbs.net in sendmail (all but about 700 of those are from
xbl+sbl)- I have not yet had a false positive report from these. (not
saying it hasnt happened, just that I havent heard :)
- by contrast MailScanner identifies approx 700 spams and 450 viruses a
day.
I use other RBLs to contribute to SA score.
here are my tweaks in spam.assassin.prefs.conf - not saying to follow my
example necessarily.
score RCVD_IN_BL_SPAMCOP_NET 2.5
score RCVD_IN_DSBL 1.0
score RCVD_IN_DYNABLOCK 2.2
score RCVD_IN_NJABL .4
score RCVD_IN_NJABL_PROXY 1.0
score RCVD_IN_NJABL_RELAY 1.0
score RCVD_IN_NJABL_DIALUP 2.2
score RCVD_IN_OPM 4.3
score RCVD_IN_SORBS .7
score RCVD_IN_SORBS_WEB 1.0
score RCVD_IN_SORBS_SPAM .5
score RCVD_IN_RFCI 0.5
score DNS_FROM_RFCI_DSN 1.5
score NO_DNS_FOR_FROM 2.0
--
----
MHO
---
shanna leonard
arizona health sciences library
626-2923
----------------------------------
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/ and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
More information about the MailScanner
mailing list